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Senator Grasslcy : 

I write in response to your letter til" 27 August 201? requesting information about 
intentional and willful misuse of surveillance authorities. 

Since I January 2003, there have been 12 substantiated instances of intentional misuse of 
the signals intelligence (SIG1NT) authorities of the Director of the National Security Agency. 
I he NSA Office of the Inspector General (GIG) currently has two open investigations into 
alleged misuse of SKilN 1 and is reviewing one allegation foi possible investigation. 

1. Civilian Employee, Foreign Location 

In 20! t, before an upcoming reins estigaiion polygraph, the subject reported thai in 2004. 
"out of curiosity." he performed a SKilN T query of his home telephone number and the 
telephone number of his gii I friend, a foreign national. The S1GINT system prevented the query 
on the home number because ii was made on a l-S person I'he subject viewed the metadata 
returned by the query on his girlfriend's telephone, 

The appropriate Old conducted an investigation. The subject's actions were found to be 
in violation {if United States Signals Intelligence Directive (IJSSM)l IS (Legal Compliance and 
I '.S. I'erson Minimisation Procedures). 

The matter wax referred to DoJ in 2011 for possible violations of IX I S.C $(>41 
(embezzlement and theft) and 18 CS.C. §2511 (interception and disclosure of electronic 
communications). In 2011, l)o.l declined prosecution. The subject retired in 2012 before 
disciplinary action had been taken. 
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2. C h ilian Employee, F#W|p Location 

In 2005. during a pre-retirement reinvestigation polygraph and interview, the subject 
reported lliat. in 2003. he tasked SIGINT collection of the telephone number of his foreign- 
national girlfriend without an authorized purpose lor approximately one month lu determine 
whether she was "involved with any | local | government officials or other act iv hies that might get 
[him | in trouble." 

Hie NSA OIG determined that die subject's actions violated Kxeeutivc Order 12553. 
Dot? Regulation 5240 l-R. 5 CT.R. cj 2d.15.704; and NS.-VCSS I'MM .-(1-2. Chapter *0(i. ^ 1-3 
and 3 - 1 . 

Hie OlG's report was shared with the NSA OlTiee ol" General Counsel lOGC) lor an 
assessment as tu whether referral to Dal ivus appropriate. Records are insufficient to determine 
whether a referral was made. The subject retired before the OIG investigation was finalized. 

3. C ivilian Employee, Foreign Location 

In 2004. upon her return from a foreign site, the subjeel reported to NSA Security that, in 
2004. she tasked a foreign telephone number she had discovered in her husband's cellular 
telephone hecause she suspected thai her husband had heen unfaithful. The tasking resulted in 
voice collection of her husband. 

I be NSA OIG determined that the subject's actions v iolated USSR) IX. Executive Order 
12333. 5 t'.F.R. $2635. 704. and Dol) Regulation 5240.14*. and pnssihly 18 ! .S,C. §2511 
(interception and disclosure of electronic communications). 

The OIG report was forwarded to NSA's OGC. which referred the matter to Do J, I he 
Subject of the investigation resigned before the proposed discipline of removal was administered 

4. Civilian Employee. Foreign Location 

In 2003. the appropriate OKi was notilied that an employee had possibly violated 
LSSID IS. A female foreign national employed by the 1 .S. government, with whom the subject 
was having sexual relations, told another government employee that she suspected lhat the 
subject was listening to her telephone calls. The other employee reported the incident. 

I he investigation determined that, from approximately IWN to 2003. the employee 
tasked nine telephone numbers of female foreign nationals, without a valid foreign intelligence 
purpose, and listened m collected phone conversations vvlnJe assignee to foreign locations. I he 
subject conducted call chaining on one of die numbers and tasked the resultant numbers, l ie also 
incidentally collected the communications of a U.S. person on two occasions, 

I he appropriate agency referred the matter to DoJ. The subject was suspended without 
pay pending the outcome of the investigation and resigned before discipline iiad heen proposed. 



5. Civilian Kmployec, Foreign Location 

I he employee's sigency discovered that an employee had misused the SKilN I collection 
system between 2001 and ?MV> by targeting three female foreign nationals 

fhc appro prime <))G conducted an investigation. The violations were referred It) l)oj, 
'I he subject resigned before disciplinary action »;k taken. 

6. ( m than t'mployee, Foretga Location 

As the result of a polygraph examination, it was discovered that an employee hud 
accessed the collection of communications on two foreign nationals. 

The employee's agency concluded its investigation in 2006. and the subject received a 
one-year letter &i reprimand t prohibiting promotions, awards, and uithin-grade increases) and a 
10 day suspension without pay. 1 he subject's pending permanent-change-of-siation assignment 
was cancelled, and his promotion recommendation was withdrawn. 

7. Civilian Kmployec, Foreign Location 

hi 201 I. the NSA OIO was notified that, in 201 1. the subject had tasked the telephone 
number of her Ibreign-nalionul boyfriend and other foreign nationals and that she reviewed the 
resultant collection. The subject reported this activity during an investigation into another matter. 

The subject asserted that it was her practice to enter foreign national phone numbers she 
obtained in social settings into the SIGiNT system to ensure that she was not talking to "shady 
characters" and to help mission. 

The appropriate OIG found that the subject's actions potentially violated l-xecuiive Order 
1333. Part 1 .7(c)( 1 ). and [>ol> Regulation 5240. t-R. Procedure 14 

The appropriate ( )ICi referred the matter to DoJ in 201 I as a possible violation of 
18 I ,S.C. |2$U (interception and disclosure of electronic communications), 'I he suhjeel 
resigned before disciplinary action had been imposed, 

X. Military Member, ( ONUS Site 

hi 2005. the NSA Old was notified that, on the subject's first day of access to the 
SIGIN'l collection system, he queried six e-mail addresses belonging to a former girlfriend, a 
L.S. person, without authorization. A site review of SIGIN'l audit discovered the queries four 
days after thev had occurred. 
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The subject icslilied that he wanted K» practice mi ihe system Bfid had ileeivled in use ihis 
former girlfriend's e-mail addresses, lie also testified that he received tit' information a;, a result 
of fctis queries ami had not read am I '.S. person's e-mail. 

I he \S-\ OKi ennduded that Ihe subject's aciinn> violated I SSli) IK, I'Necutive Order 
12. VIA. 5 CI K §2(05,704. and DoD Regulation 5240.1 -R. 

The OKi report was forwarded to the she command and the OdC. As a result of a 
Uniform Code of Miliian Justice Article 15 proceeding, ihe subject received a reduction in 
grade 45 days restriction. 45 days of extra duly, and hall' pay for WW inonlhs. h was 
reeom mended that the subject noi be giv en a security clearance. 

9. Civilian Employer, CON US Site 

In 2006. [he Office of Oversight and Compliance within NSA's Signals intelligence 
Directorate informed NSA OIG that, between M&S and 2006. the subject had without 
authorization queried in two SIGINT systems the telephone numbers of two foreign nationals, 
one of whom was his girlfriend. On one occasion, the subject performed a text query of his own 
name in a SIGINT sWeni. 

I he OIG investigation found thai the subject queried his girlfriend s telephone number on 
mam occasions and her name on [wo. He testified that he received only one "hit" from the 
queries on the girlfriend. Another number he queried, that of a foreign national language 
instructor, returned "insignificant information." 

'file subjeet claimed that he queried his name to see il am one was discussing his trav el 
ami ihe telephone numbers to ensure that there were no security problems. 

I he OKi concluded that the subject"*; actions violated fseeutive Order I2W>. $ CT.R 
§2(05.704. mm Regulation 5240. 1 -R. and NSA 'CSS PMM. Chapter 566 (General Principles for 
on ihe job conduct: Use of Government Resources, and Insubordination). 

I he Agency has hcen unable to locate records as to whether a referral was made to Do.!. 
Ihe subject resigned from the Agency before the proposed discipline of removal had been 
administered, 

1(1. Civilian Employee, CONUS Site 

In 2008. the NSA Old was notified thai a SIGINT audit had discovered a possible 
violation of I.'SSID IK, An investigation revealed that, while reviewing the comimmientions of a 
valid intelligence target, the subject determined that the intelligence target had a relative in the 
U.S. I lie subject queried the SIGIN I system for the e-mail address of the intelligence target in 
2H0N and used other search terms to obtain information about the target's relative. 



-i 



i fNCLASS ! P l i-:r< 



IhcOKi concluded thul tlic subject's actions \ ioliHcil I SMl> IX. I veculive ( )rder 12333. 
.11 id DoD Regulation 5240. 1 -[<. 

1 he Old report was forwarded to MSA's (Kit'. 1 he subject received a written reprimand. 

I (, Military Member, foreign Location 

In "?A)W. the NSA 01 fj was noli Hod that, in 2()lW, a piililary mem her aligned to a 
military tactical mlelligetiec* unit queried ihe communication* of his wife, who was also a 
military member stationed in a foreign location. I lie misuse was discovered by a re\ iew of 
SItiINT audit logs. The investigation bj his mil i Ian unit substantiated the misuse. 

I hiYumli a I niform Code of Military Justice Article 1? proceeding, the memher received 
8 reduction in rank. 45 days c\tra duty, and half pay for iwo monlhs, The niemhcr's access lo 
classified information was revoked. 

In 2UUM this mane: Vm referred to Ek>J. 



12, Military Member, l-orcign Location 

In 200'). a military unit ai a foreign location notilied the NSA Olt.i thai, in 2Wi i >. u 
military member had queried a country's telephone number* to aid in learning ibal country's 
language. 1 he misuse was discovered by a review ofSKilN I audit logs. 

The appropriate hraneh of the miliUtry determined thai the analyst's queries were not in 
support of his official duties and violated t ! SSII~) 18. 

The member's database aeeess and access lo classified information vvere suspended. 



1 hope that this information satisfies your request 



Sincerely. 




i >r. neorge r naro 
Inspector General 



cc: Sen. I 'at rick I ealiv 
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